Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer
File: mGt3LcGJNOUfJ7UsvmWzJBJhv2U.cer (raw, json)
Hash identifier: amLv+yHkBZEiS0hVer+HoztxEUpqRG7NopvFEjdZQXA=
Subject key identifier: 98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB019AD073D9E47D744DD7A48D60CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.131.0/24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:01:9a:d0:73:d9:e4:7d:74:4d:d7:a4:8d:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986b772dc18934e51f27b52cbe65b3241261bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:3f:d3:0e:d5:30:bc:b4:97:27:35:05:9b:
2d:b1:a2:51:05:f4:ff:35:c5:5a:64:8b:6a:8f:83:
1d:bb:13:c2:64:cf:f7:8d:8f:97:46:90:ed:ae:73:
fe:a8:a1:3a:06:34:fa:0d:a3:a7:02:5a:c4:e5:07:
b9:11:40:51:b3:96:46:09:ca:b3:70:e0:c3:05:77:
23:5e:53:6a:27:8b:28:dc:f8:6e:aa:50:f5:be:59:
df:ff:d0:4c:7d:bf:bb:05:98:ac:b0:0d:53:0b:cb:
8c:a8:78:70:14:d3:e9:9f:b5:16:ae:5b:95:92:20:
34:40:37:fa:2e:d1:6e:b2:c0:40:68:6c:eb:78:37:
2d:76:d8:6d:07:d9:da:58:2d:da:f0:4d:d3:82:77:
5d:e3:79:a0:aa:63:a7:3d:47:7a:d8:2f:55:5b:f1:
26:63:ce:b0:2c:ce:22:fb:19:26:ab:80:65:f2:7b:
87:8b:2e:4d:f4:33:34:57:1e:30:5a:17:20:a6:33:
12:e8:81:07:db:58:28:c5:b5:47:ea:41:5e:d9:8c:
f4:0d:f6:5a:ba:ee:f4:50:35:84:f5:63:c8:21:7c:
0e:54:c5:75:e4:b9:eb:19:e7:d7:e2:6b:ec:ff:1a:
4c:ff:30:73:ce:90:2b:fe:65:49:25:4f:d9:7f:f2:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:77:2D:C1:89:34:E5:1F:27:B5:2C:BE:65:B3:24:12:61:BF:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b8aef7-5be9-4db0-bffc-f467d5a0bafa/1/mGt3LcGJNOUfJ7UsvmWzJBJhv2U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:77:59:8d:2f:2b:96:2e:f7:61:c4:08:97:c2:13:2d:ba:fe:
c4:5a:fc:e7:19:6b:83:c6:b5:5b:b5:b0:57:29:a7:19:23:b0:
ad:13:28:81:16:f7:59:27:be:4f:6f:71:de:95:cb:d9:d2:4e:
1a:ff:6f:b8:ba:7e:97:c4:2f:86:29:10:d3:ff:9c:b9:1d:62:
b6:ae:d6:09:3f:ed:5f:47:4d:fa:d6:3b:77:60:3b:f6:e1:04:
2a:a4:da:b7:bc:38:fa:f2:47:db:7e:ec:76:99:a0:29:85:7c:
ae:6b:6e:8f:21:4a:43:4a:ba:f4:47:97:ab:dd:da:19:d4:8e:
35:8c:29:50:79:4e:14:82:ab:e2:e7:f8:fc:88:3d:c9:94:4f:
f7:15:5d:89:b6:96:4f:38:5d:70:d0:53:c8:21:fe:be:5e:65:
32:4f:84:a9:5d:14:08:12:e2:05:ce:4a:7b:72:b0:44:44:72:
01:d1:ac:97:36:09:9e:bb:e0:3d:e0:7c:ed:a1:40:37:40:1e:
21:08:71:18:2b:d1:b7:09:16:4c:1d:33:af:88:1a:e6:f2:8c:
72:2e:d3:b5:66:e1:d2:c8:b9:35:b1:3b:78:50:78:2e:69:ae:
60:2c:49:b0:eb:29:6e:ff:be:fe:60:13:01:6c:4e:e0:8b:b6:
07:e9:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:15 2024 by rpki-client on console-ams.rpki-client.org